David Soria Parra

speaker

798 appearances 1 recordings 1 series first heard Dec 2025 last heard 27 Dec

David Soria Parra’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 1 in all, peaking in Dec 2025 with 1.

Appearances

newest first · ▶ plays the moment

Latent Space: The AI Engineer Podcast · One Year of MCP — with David Soria Parra and AAIF leads from OpenAI, Goose, Linux Foundation · 27 Dec 2025 podcast

Um and if you combine these into the same server, you just can't do this anymore.

And so all we needed to do is like, okay, we are a resource server.

The MCP server is a resource server, how you get the token from the authentication server, if you have opinions on how you should do it, but it's kind of separated.

And that's what happened then in the doing spec, where we separated this out um and worked through a lot of these, like, okay, you know, how do you do dynamic climb registration and other aspects, which also were part of the March spec.

Um, we can talk about that.

That's that's a whole other story of like

We were actually pushing the boundaries of what OAuth can do with MCP.

Um but yeah, that was that was the big part in in March, which we're like and that um was that authentication spec, the first iteration, then fixing it in June.

Walth itself is for the most part a very human-centric protocol.

It's just it just tells you how you obtain a token if you don't have a token.

Once you have a token, actually it doesn't matter.

You just put it into the barrel token.

And so we're not very prescriptive of what like agent-to-agent um authentication would look like or on behalf of agents.

They are ideas that we are looking into, and I don't have all the specifics, but we are not prescriptive in the

same way we're prescriptive as with or ask, but you can technically as a moment here you have a token that might be like

bound to like a workload identity or something like that, then you just can pass that still to the MCP server.

We're just not telling you how to obtain it just yet.

And so we're not prescriptive.

And so people do this and they can do it when well particularly when they're within like an enterprise and have a somewhat closed ecosystem.

But if the client and the server don't know each other, we just don't have a good solution for now.

Showing 81–100 of 798 · page 5 of 40